CVE-2009-2266 - CVE House
Back to Database
Status published Medium CVE-2009-2266

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote...

Vulnerability Description

OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-2266

Credits & Attribution

No credits recorded in the NVD database.

References

More from oxid

View All →
CVE-2009-3113
Unspecified vulnerability in OXID eShop Professional, Enterprise, and Community Edition...
Medium 5
CVE-2008-5405
Stack-based buffer overflow in the RDP protocol password decoder in...
Critical 9.3
CVE-2005-0807
Multiple buffer overflows in Cain & Abel before 2.67 allow...
High 7.5

Affected Vendor

Affected Software

eshop
Vulnerable Versions:
0, 4.0.0.0_13895, 4.0.0.0_13934, 4.0.0.0_14260, 4.0.0.1_14455, 4.0.0.2_14842, 4.0.0.2_14967, 4.0.1.0_15990, 4.1.0-17976, 4.1.1-18442, 4.1.2-18998, 4.1.3-19918

Timeline

Official Publish: September 9th, 2009
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.